Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1-zvMy5CU7hPXdBDADw1Tijl2-J8.roa
File: 1-zvMy5CU7hPXdBDADw1Tijl2-J8.roa (raw, json)
Hash identifier: hCClAJtk8EbzHurXnf7U1i7tvCN10v6dhkW4Hk/crbg=
Subject key identifier: FB:3B:CC:CB:90:94:EE:13:D7:74:10:C0:0F:0D:53:8A:39:76:F8:9F
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01923A43B6187B15AD4A7E5304445D23C1B0
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1-zvMy5CU7hPXdBDADw1Tijl2-J8.roa
Signing time: Sat 28 Sep 2024 20:12:48 +0000
ROA not before: Sat 28 Sep 2024 20:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 87.254.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:43:b6:18:7b:15:ad:4a:7e:53:04:44:5d:23:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 28 20:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb3bcccb9094ee13d77410c00f0d538a3976f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:1b:d9:39:69:12:7a:f1:28:f7:13:03:10:
32:f9:3b:76:3c:79:05:b0:98:d2:38:38:54:66:e6:
f4:b8:9d:b6:0f:28:9b:d6:65:24:49:e4:49:7f:eb:
26:a2:4c:b7:55:c1:05:04:b7:5c:5e:ad:c6:7a:2b:
82:33:7e:5f:8f:92:fc:ae:ef:ca:0e:44:23:c9:6b:
46:c8:63:a8:d0:94:28:88:ce:a5:75:41:ae:63:d5:
de:f8:df:bd:50:15:0d:22:92:d7:be:11:22:6e:d6:
1d:ed:05:ae:36:ab:af:d8:00:62:2e:9f:b9:ac:e3:
0f:79:f7:f4:c3:1f:45:6c:b7:e8:33:3c:4f:3a:0d:
c2:16:e7:33:e8:05:ad:7a:b4:f4:f7:90:c7:9d:73:
05:b4:84:6f:a9:cd:ca:de:96:70:2c:87:8c:60:2c:
35:f5:51:49:90:72:e5:39:0e:28:ac:9c:37:de:30:
39:e8:b9:d3:a8:c5:8a:93:a1:25:09:44:3a:72:3b:
d9:0d:c4:01:48:bc:28:a7:57:45:48:b6:22:f6:99:
8c:8b:ae:a8:10:42:3e:68:60:51:16:83:5f:06:08:
a9:24:e8:69:f0:5d:9d:cc:a7:ea:49:71:db:01:4e:
8f:a5:d3:19:60:70:fa:58:fa:84:d7:7c:d4:57:90:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:CC:CB:90:94:EE:13:D7:74:10:C0:0F:0D:53:8A:39:76:F8:9F
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/1-zvMy5CU7hPXdBDADw1Tijl2-J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3b:ee:e1:b2:7a:5c:60:2b:73:24:51:9e:ac:58:d7:f6:ee:
06:40:48:c7:aa:ee:f5:15:87:f2:31:39:74:a2:67:e4:e4:4e:
48:f8:95:19:06:44:68:cc:31:1c:2c:d8:d8:eb:69:b3:d4:b9:
ab:cc:8b:61:70:a4:e7:57:56:5d:31:cf:82:1b:90:40:3c:39:
dd:6d:6e:ed:6f:fa:c2:c4:88:ac:57:66:22:81:ce:80:12:14:
7e:45:2b:ad:ac:ee:58:f0:c4:a7:c5:cd:ce:e1:a0:72:5e:72:
b7:20:9b:44:8d:f6:75:ab:49:e6:46:21:f9:ef:15:35:e6:2b:
4d:1c:2e:20:31:27:70:73:b0:e4:68:d7:ea:f1:1b:f4:0c:68:
2e:f0:92:8f:74:db:61:41:19:7c:2d:1e:7b:52:3c:32:d3:42:
1a:91:5d:ff:78:f2:eb:87:00:9f:a6:11:38:cb:7d:fc:4e:34:
be:76:5f:5a:58:75:7e:d7:da:aa:bb:66:d3:f4:70:e1:dc:5a:
a5:93:d3:e3:a2:da:1f:f5:44:01:27:b0:ef:ac:10:29:3f:52:
69:d8:cd:e7:e5:f5:58:3e:de:e5:f5:f0:dc:2d:5d:02:58:89:
60:07:20:79:42:ed:37:9e:cd:bc:ec:65:ae:0a:6b:9b:7c:35:
50:23:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:20 2024 by rpki-client on console-ams.rpki-client.org